$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa File: 3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa (raw, json) Hash identifier: rCr5RtGTbim42irmGdyh9XOYkL9Mo0yi+4ZqQGn2Ok4= Subject key identifier: 71:DE:54:C4:1E:92:5E:D4:21:93:32:47:62:6C:4C:0A:19:B7:C3:CE Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848E2D20559B491A2A754C3D700 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 20115 IP address blocks: 71.9.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d2:05:59:b4:91:a2:a7:54:c3:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=5951469d-8f40-4962-8de9-2891daf40ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b8:d1:40:a5:de:c6:bd:29:b4:39:e7:7f:29: 42:5c:c1:74:4f:22:46:d7:6e:c5:96:4e:93:3e:32: 2c:72:fd:c9:8f:e7:ee:b3:54:d7:2a:23:6b:45:0d: 14:12:ea:1a:12:43:43:ee:45:2a:02:7b:68:52:18: a6:ff:6e:fb:eb:9e:b0:ca:ee:9b:fe:9c:a5:b3:74: c7:ac:88:88:9e:fa:ee:3d:52:6a:eb:20:c0:0f:af: a8:29:91:4b:11:f2:b6:aa:fd:4d:a1:f3:61:a6:ea: 94:b3:86:ad:e8:3e:45:58:51:af:6d:87:3c:5c:01: b3:42:71:71:94:13:53:46:aa:74:77:56:fc:f7:db: 6d:f9:70:29:5d:76:40:a1:bb:87:2f:27:cc:27:99: 51:54:d4:52:38:98:3e:66:c0:d8:b0:44:96:9e:5e: 66:84:08:7a:87:40:a5:51:25:cb:3f:51:ca:07:d3: f3:7f:6c:98:bf:dd:02:95:c1:98:f9:ff:be:a0:ce: 79:fe:53:76:cb:33:54:fd:bb:da:33:90:eb:3a:9d: 80:2a:18:61:48:d6:90:47:4a:61:67:8e:99:94:be: c9:ca:e5:f3:b7:ce:1e:72:cd:79:38:c3:36:d5:fe: 79:9a:1c:59:2f:39:9e:c3:b2:bb:05:4f:29:98:88: a2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DE:54:C4:1E:92:5E:D4:21:93:32:47:62:6C:4C:0A:19:B7:C3:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/3abaa69b-02ba-3e56-a2ea-71e0d3f0bf6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 71.9.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:eb:aa:a6:78:55:2a:b1:34:d4:23:1b:ad:59:03:50:df:73: 25:0a:9e:dd:a6:32:35:f4:81:36:f9:a6:2c:5e:fe:98:f9:a6: 83:89:3c:3a:7c:a0:a0:86:7e:9e:3a:be:0a:65:c3:a4:60:89: 4f:10:35:85:9e:6e:87:e6:6e:85:17:6e:c1:c1:e2:c8:ed:59: 1c:4b:5c:a6:11:fb:b6:9d:bf:09:0e:93:d2:e9:8c:db:f3:42: d6:8c:e8:51:70:fe:aa:6d:dd:9a:f8:74:58:f6:c0:aa:9e:5e: 4d:ca:9d:39:ed:b9:ca:3a:8f:fb:ff:5a:cc:b9:96:8c:93:44: 6f:11:23:54:ca:4a:70:43:1a:46:0a:1b:2c:74:23:84:57:f8: 2e:03:ed:ee:68:58:d9:f0:d8:5e:5a:9a:09:b1:b4:1b:1f:71: 8e:5f:41:06:5b:7e:90:3b:31:ed:87:77:55:79:7f:46:99:88: fd:fb:39:1a:2c:82:58:dc:63:02:58:8f:b0:b6:91:7d:c2:93: 19:fa:4f:d3:72:74:e7:05:03:49:c6:c4:09:c7:c8:5e:28:07: 3a:ca:60:b0:e3:e4:e6:29:37:29:95:33:6d:69:9b:7c:94:c3: 4a:d0:4c:e8:50:b5:35:db:4b:4a:c6:10:c6:f4:03:d2:3c:56: 11:da:95:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0gVZtJGip1TD1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk NTk1MTQ2OWQtOGY0MC00OTYyLThkZTktMjg5MWRhZjQwYmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLjRQKXexr0ptDnnfylCXMF0TyJG127Flk6T PjIscv3Jj+fus1TXKiNrRQ0UEuoaEkND7kUqAntoUhim/277656wyu6b/pyls3TH rIiInvruPVJq6yDAD6+oKZFLEfK2qv1NofNhpuqUs4at6D5FWFGvbYc8XAGzQnFx lBNTRqp0d1b899tt+XApXXZAobuHLyfMJ5lRVNRSOJg+ZsDYsESWnl5mhAh6h0Cl USXLP1HKB9Pzf2yYv90ClcGY+f++oM55/lN2yzNU/bvaM5DrOp2AKhhhSNaQR0ph Z46ZlL7JyuXzt84ecs15OMM21f55mhxZLzmew7K7BU8pmIiicQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHeVMQekl7UIZMyR2JsTAoZt8POMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvM2FiYWE2OWItMDJiYS0z ZTU2LWEyZWEtNzFlMGQzZjBiZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPrqqZ4VSqxNNQjG61ZA1DfcyUKnt2mMjX0gTb5pixe/pj5poOJPDp8 oKCGfp46vgplw6RgiU8QNYWebofmboUXbsHB4sjtWRxLXKYR+7advwkOk9LpjNvz QtaM6FFw/qpt3Zr4dFj2wKqeXk3KnTntuco6j/v/Wsy5loyTRG8RI1TKSnBDGkYK Gyx0I4RX+C4D7e5oWNnw2F5amgmxtBsfcY5fQQZbfpA7Me2Hd1V5f0aZiP37ORos gljcYwJYj7C2kX3Ckxn6T9NydOcFA0nGxAnHyF4oBzrKYLDj5OYpNymVM21pm3yU w0rQTOhQtTXbS0rGEMb0A9I8VhHalVY= -----END CERTIFICATE-----Generated at Sun Apr 27 14:16:34 2025 by rpki-client